Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: NW7shp9O5MxnjbwWR9Pgu1O4+EXFnXNV5FDG/EM2tuY=
Subject key identifier: D6:A0:82:AF:82:5E:59:69:37:CA:44:86:BA:94:D4:DC:36:E9:96:13
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 019D38656A7B5A54D12623F2BA41E67E2389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 07:01:03 +0000
Manifest this update: Sun 29 Mar 2026 07:01:03 +0000
Manifest next update: Mon 30 Mar 2026 07:01:03 +0000
Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: tPzEwIg1cEoQGKL+qO5VDla5sUemX6jBrMD4CqobjsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6a:7b:5a:54:d1:26:23:f2:ba:41:e6:7e:23:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Mar 29 07:01:03 2026 GMT
Not After : Mar 30 07:01:03 2026 GMT
Subject: CN=d6a082af825e596937ca4486ba94d4dc36e99613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:07:3d:a4:56:dd:40:1a:d8:9c:1d:0a:9b:50:
76:18:d9:78:16:28:a4:df:0d:94:e1:3b:82:b2:24:
94:fb:ec:db:4b:ee:5e:ec:62:8c:ac:0d:6f:5c:a3:
b3:3e:07:9c:05:4a:8a:b1:07:ba:f7:dc:16:8d:21:
be:9f:2b:20:00:60:59:73:43:2c:ef:af:a4:74:5a:
08:7e:7a:00:f7:24:e5:dc:64:9e:55:7c:70:74:68:
89:30:28:86:bf:d4:c7:07:d2:96:6e:b4:ac:b5:e6:
52:cc:37:29:4c:7f:e2:64:57:40:67:71:7b:40:82:
7b:65:05:e8:ba:c5:f9:a5:f7:ff:4f:6c:9e:ac:51:
e9:a6:f8:c0:6a:bf:af:92:0a:e4:6c:ad:60:c2:92:
c0:de:74:6e:81:21:be:5e:84:54:34:1d:60:31:b9:
ca:e8:d1:15:7f:66:51:8c:c8:b1:2b:54:3a:55:c8:
62:2b:65:4d:59:34:a1:33:4e:0f:6c:37:33:5a:48:
81:59:44:18:12:da:6c:b2:72:67:4f:6b:6c:e8:7c:
f5:db:ef:98:bf:52:0c:4f:9e:31:c9:6b:41:0f:92:
27:ea:64:50:65:10:ff:83:65:56:6e:ee:79:b6:11:
81:1d:36:91:16:cd:01:fd:be:93:b0:17:47:24:7c:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:82:AF:82:5E:59:69:37:CA:44:86:BA:94:D4:DC:36:E9:96:13
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:24:74:d7:37:f5:d3:b4:a4:05:3a:7c:56:93:0f:ab:b7:fe:
3f:d4:26:cb:fe:0f:21:2a:0e:63:2a:cc:95:07:11:0c:7b:2c:
9c:83:3b:97:b9:ea:14:b3:a0:10:a3:67:d8:1a:6f:c9:92:62:
f7:b0:50:fd:e8:bf:1a:9a:26:e7:63:3e:19:30:67:4a:be:b9:
68:46:81:5f:f4:2e:b9:2e:74:ea:2b:00:98:0e:de:85:0c:ee:
37:44:bc:57:4a:2f:33:81:73:51:49:a7:19:a1:81:53:b0:e8:
e3:d2:3b:71:16:72:f4:39:3c:00:c7:6f:bb:e6:e0:96:e5:51:
ec:4a:73:96:4e:bd:21:6c:70:6e:a2:79:63:8a:0e:f3:0b:81:
3c:82:d5:af:22:12:eb:a7:5b:41:fc:6f:c8:06:98:b7:ef:89:
29:4d:b3:e9:77:1d:26:30:64:b0:a0:d1:57:c0:c4:13:4f:d0:
80:ba:86:c9:1c:8d:c9:14:c9:38:1a:fa:9d:5f:a3:4d:f3:7d:
46:77:ec:f6:a8:31:de:38:9b:17:e2:7a:d9:3f:31:78:d9:51:
62:f9:e5:fb:e5:bf:86:a6:36:17:01:b6:3c:d8:9b:b6:b2:ff:
53:09:7b:af:f1:11:11:19:0a:31:2a:ac:35:1f:b1:87:85:a8:
5b:92:21:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:13 2026 by rpki-client